Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9da2c17e-38b5-4574-b273-36a0f0b2956d/1463ecb6-79b9-31ab-a59a-a9374df47949.roa
File:                     1463ecb6-79b9-31ab-a59a-a9374df47949.roa (raw, json)
Hash identifier:          yaA09/niQu1N/a1at1euMtDD71wnsaotQG06FhNvrLU=
Subject key identifier:   A4:16:F5:92:EC:3F:51:54:E3:7E:5C:23:39:AD:5D:CF:C4:D6:81:B6
Certificate issuer:       /CN=9da2c17e-38b5-4574-b273-36a0f0b2956d
Certificate serial:       010D0C9F4328584B2FC191A535019811CC03A080
Authority key identifier: CC:34:69:83:2B:B0:22:C7:B3:DF:70:02:47:E3:67:14:DE:34:F4:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9da2c17e-38b5-4574-b273-36a0f0b2956d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9da2c17e-38b5-4574-b273-36a0f0b2956d/1463ecb6-79b9-31ab-a59a-a9374df47949.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     8095
IP address blocks:        23.177.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9da2c17e-38b5-4574-b273-36a0f0b2956d/9da2c17e-38b5-4574-b273-36a0f0b2956d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9da2c17e-38b5-4574-b273-36a0f0b2956d/9da2c17e-38b5-4574-b273-36a0f0b2956d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9da2c17e-38b5-4574-b273-36a0f0b2956d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:91:a5:35:01:98:11:cc:03:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9da2c17e-38b5-4574-b273-36a0f0b2956d
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=d00b0c9a-06d2-416a-8bfe-c9b8a47dc5c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c3:6b:86:9e:79:e8:af:bf:3e:5b:73:35:07:
                    7d:15:4e:d8:61:98:4e:ea:e0:95:38:f2:24:7f:14:
                    cb:11:ac:8b:7d:e6:05:a0:9a:78:80:6e:d5:9d:8e:
                    e5:0f:e2:fd:4f:45:8a:ee:ee:64:18:2c:4a:2f:be:
                    4f:7a:18:8f:cd:a0:46:3b:fd:f8:0b:f1:91:f1:18:
                    4c:c1:47:03:c0:bd:cc:b7:87:d0:76:7e:2c:d6:97:
                    c6:44:3c:87:35:90:66:7a:8c:26:c2:e1:3f:06:87:
                    ee:fa:4c:ab:d0:88:ce:bc:e9:54:ba:86:11:84:67:
                    18:27:98:5f:d1:a6:fa:3e:33:db:96:fd:07:76:d4:
                    79:36:f4:a2:c3:da:11:92:99:1d:33:43:a2:4a:90:
                    28:99:3e:ff:0b:39:7d:f8:36:38:7e:2c:3a:64:b5:
                    79:08:0b:f6:11:69:a0:9c:89:71:da:6e:d0:a7:7b:
                    07:1f:9e:af:68:3e:30:e5:cb:75:b3:49:04:ee:cf:
                    03:a6:f6:2a:85:ba:bd:b3:f4:c4:e7:e8:9b:4e:5b:
                    a1:95:78:f4:3c:a5:7e:b1:9c:fa:de:c6:c4:d8:7d:
                    20:db:c0:f4:1f:bf:23:83:4c:58:ec:1d:89:40:41:
                    40:e9:fc:4c:3c:f9:24:8b:e4:65:de:f1:69:bd:1d:
                    44:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:16:F5:92:EC:3F:51:54:E3:7E:5C:23:39:AD:5D:CF:C4:D6:81:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9da2c17e-38b5-4574-b273-36a0f0b2956d/1463ecb6-79b9-31ab-a59a-a9374df47949.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9da2c17e-38b5-4574-b273-36a0f0b2956d/9da2c17e-38b5-4574-b273-36a0f0b2956d.crl

            X509v3 Authority Key Identifier:
                keyid:CC:34:69:83:2B:B0:22:C7:B3:DF:70:02:47:E3:67:14:DE:34:F4:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9da2c17e-38b5-4574-b273-36a0f0b2956d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.177.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:09:f9:74:82:8b:df:ff:47:1c:25:ec:05:c0:6d:33:8b:b3:
         be:1d:24:0c:2c:b1:4e:9e:c9:0f:4b:50:a8:1d:aa:63:03:5d:
         e9:48:23:70:da:92:74:a6:c9:bd:5d:7a:31:b5:52:44:71:49:
         95:ad:e3:17:10:98:e0:bf:e9:24:b9:94:ef:eb:eb:a8:95:bf:
         86:bc:87:da:43:43:3e:47:18:1e:ee:b9:da:3a:40:95:e3:eb:
         a5:9d:1e:5e:8e:7e:88:97:4a:33:60:17:0e:3a:27:7a:e3:0a:
         56:09:29:3a:3b:47:ee:26:e4:ca:1b:53:ec:df:62:50:8f:74:
         20:c7:ea:13:dc:f5:bf:c7:c5:90:25:49:7f:ac:6a:ec:d3:a4:
         43:84:73:a1:fc:c4:e1:71:96:fe:9a:c8:2d:c7:55:e3:1d:56:
         26:11:6f:4f:46:76:24:22:d9:eb:63:e3:93:6f:d0:fd:42:4d:
         8e:c2:e0:1a:c5:ca:78:37:46:0a:b6:9c:5c:e6:79:13:63:20:
         dc:09:09:fc:5e:0f:9f:1a:2d:98:dd:1f:50:a8:3e:7f:24:d3:
         69:f1:19:9d:ac:ad:84:69:61:00:d2:d2:eb:89:69:c9:2b:18:
         47:b7:ec:68:9f:56:dd:ea:78:01:9d:6e:4a:a8:11:45:26:2b:
         8e:71:21:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:31:55 2025 by rpki-client